Grouper loader type SQL_GROUP_LIST only syncs groups with members

If you're doing SQL_GROUP_LIST and you specify grouperLoaderGroupQuery, then groups are sync'ed based off of the groups that are returned in grouperLoaderQuery rather than grouperLoaderGroupQuery.

So the problem with this is that if you have a group with no members, but your grouperLoaderGroupQuery contains privileges (readers, updaters, etc), then those privileges won't be added until a member is added to the group.